Tag: breach
-
Warning: Brute force attacks hitting SonicWall firewall configuration backups
Tags: attack, authentication, backup, breach, cloud, computer, computing, credentials, data, defense, encryption, firewall, Hardware, login, mfa, password, phishing, software, technology, threatWhat are brute force attacks?: Brute force attacks use trial and error to crack passwords, login credentials, and encryption keys. They’ve been around since the beginning of the computer age, yet are still effective. Why? In part because people still use easily guessable passwords like ‘1234’, or their company’s name, or default passwords left on…
-
ShinyHunters claims 1.5 billion Salesforce records stolen in Drift hacks
The ShinyHunters extortion group claims to have stolen over 1.5 billion Salesforce records from 760 companies using compromised Salesloft Drift OAuth tokens. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/shinyhunters-claims-15-billion-salesforce-records-stolen-in-drift-hacks/
-
TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks
The threat actor known as TA558 has been attributed to a fresh set of attacks delivering various remote access trojans (RATs) like Venom RAT to breach hotels in Brazil and Spanish-speaking markets.Russian cybersecurity vendor Kaspersky is tracking the activity, observed in summer 2025, to a cluster it tracks as RevengeHotels.”The threat actors continue to employ…
-
VC giant Insight Partners warns thousands after ransomware breach
New York-based venture capital and private equity firm Insight Partners is notifying thousands of individuals whose personal information was stolen in a ransomware attack. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/vc-giant-insight-partners-warns-thousands-after-ransomware-breach/
-
SonicWall warns customers to reset credentials after breach
SonicWall warned customers today to reset credentials after their firewall configuration backup files were exposed in a security breach that impacted MySonicWall accounts. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sonicwall-warns-customers-to-reset-credentials-after-MySonicWall-breach/
-
When “Your Data’s Out There” Isn’t Enough
Why Identity Breach Monitoring Needs an Upgrade If you’ve ever received a “dark web alert,” you probably know the uneasy feeling. An email pops into your inbox with a subject line like: “Your personal information has been found on the dark web.” It sounds urgent, maybe even terrifying. But when you open it, the details……
-
Microsoft and Cloudflare execute ‘rugpull’ on massive phishing empire
Tags: access, ai, attack, blockchain, breach, computer, credentials, crime, crimes, crypto, cybercrime, data, detection, exploit, extortion, finance, fraud, infrastructure, international, law, microsoft, phishing, programming, scam, service, strategy, threat, toolLegal victory with limitations: Microsoft’s investigation identified Joshua Ogundipe, based in Nigeria, as the operation’s leader and primary architect. The company filed a lawsuit against Ogundipe and four associates listed as John Does in late August, then obtained a court order from the US District Court for the Southern District of New York in early…
-
When “Your Data’s Out There” Isn’t Enough
Why Identity Breach Monitoring Needs an Upgrade If you’ve ever received a “dark web alert,” you probably know the uneasy feeling. An email pops into your inbox with a subject line like: “Your personal information has been found on the dark web.” It sounds urgent, maybe even terrifying. But when you open it, the details……
-
VC firm Insight Partners says thousands of staff and limited partners had personal data stolen in a ransomware attack
The venture capital giant, behind cyber giants Wiz and Databricks, notified current and former employees, as well as the firm’s limited partners, that their data was stolen in a January cyberattack. First seen on techcrunch.com Jump to article: techcrunch.com/2025/09/17/vc-giant-insight-partners-notifies-staff-and-limited-partners-after-data-breach/
-
TaskUs Employees Behind Coinbase Breach, US Court Filing Alleges
An employee of outsourcing firm TaskUs allegedly sold data stolen during the Coinbase data breach to hackers for $200 per record before her arrest in January 2025 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/taskus-employee-coinbase-breach/
-
Microsoft Disrupts RaccoonO365 Phishing Kit, Seizes 338 Malicious Sites
Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 Microsoft credentials worldwide First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-disrupts-phishing-kit/
-
DoJ resentenced former BreachForums admin to three years in prison
The U.S. Department of Justice (DoJ) resentenced the former administrator of the popular BreachForums hacking forum BreachForums to three years in prison. The U.S. DoJ resentenced the former BreachForums administrator, Conor Brian Fitzpatrick (aka Pompompurin), 22, to three years in prison. Authorities say he ran the notorious hacking forum, which traded stolen data and cybercrime…
-
World’s Biggest Hacker Forum Admin Gets Resentenced to Serve Three More Years
Conor Brian Fitzpatrick, the founder and operator of BreachForums, has been resentenced to three more years in prison after a federal appeals court vacated his earlier light sentence. Authorities say Fitzpatrick created and ran one of the world’s largest English-language hacker forums, where criminals bought and sold stolen data. The Justice Department and FBI emphasized…
-
Be Breach Ready: How ColorTokens Xshield Stops Cyber Threats Before They Spread
Each week, new operating system vulnerabilities are disclosed. The same alerts landing in your inbox are also fueling hacker research, as they look for the fastest way to exploit these newfound system weaknesses. We even have one vendor that is known for “Patch Tuesday” releases every second Tuesday of every month. The question is simple:……
-
News brief: Salesloft Drift breach update and timeline
Check out the latest security news from the Informa TechTarget team. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366630934/News-brief-Salesloft-Drift-breach-update-and-timeline
-
No More Blind Spots: Achieving Complete SDLC Visibility in a Multi-Cloud World
Tags: access, attack, breach, business, ciso, cloud, compliance, container, control, data, exploit, identity, infrastructure, least-privilege, monitoring, programming, risk, service, software, threat, vulnerabilityStruggling with a messy, multi-cloud environment? Learn how Tenable’s unified cloud security approach helps you eliminate dangerous blind spots, attain complete visibility and control, and secure your assets from the first line of code to full production. Key takeaways Fragmented multi-cloud environments create risky blind spots, making unified visibility essential to identify and manage security…
-
Why Secure Document Editing is More Important than Ever
Secure document editing protects sensitive data with encryption and compliance tools, while reducing costly breaches and building trust,… First seen on hackread.com Jump to article: hackread.com/why-secure-document-editing-important-than-ever/
-
Microsoft blocks bait for ‘fastest-growing’ 365 phish kit, seizes 338 domains
Redmond names alleged ringleader, claims 5K+ creds stolen and $100k pocketed First seen on theregister.com Jump to article: www.theregister.com/2025/09/16/microsoft_cloudflare_shut_down_raccoono365/
-
2 Eye Care Practice Hacks Affect 260,000 Patients, Staff
South Dakota, Florida Ophthalmology Breaches Among Recent Medical Specialty Attacks. Two separate hacks on ophthalmology practices in South Dakota and Florida have affected more than a quarter-million patients. The cyberattacks were among the latest of several major data breaches reported in recent months by eye care providers. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/2-eye-care-practice-hacks-affect-260000-patients-staff-a-29458
-
Survey Surfaces Rising Number of AI Security Incidents
A global survey of 1,025 IT and security professionals finds that while organizations experienced an average of 2.17 cloud breaches over the past 18 months, only 8% were categorized as severe. At the same time, however, with the rise of artificial intelligence (AI) there may be more significant challenges ahead. More than half of respondents..…
-
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack
A major NPM breach exposed 187 packages. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/npm-ecosystem-under-siege-self-propagating-malware-compromises-187-packages-in-a-huge-supply-chain-attack/
-
Kering, owner of Gucci, Balenciaga, and other luxury brands, confirms hack
Kering said the hackers did not steal credit card numbers and that it has contacted the customers whose data is part of the breach, without saying how many were affected. First seen on techcrunch.com Jump to article: techcrunch.com/2025/09/15/company-that-owns-gucci-balenciaga-other-brands-confirms-hack/
-
Gucci and Alexander McQueen Hit by Customer Data Breach
The attack, which is linked to ShinyHunters, has reportedly compromised data relating to 7.4 million unique email addresses First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/gucci-mcqueen-customer-breach/
-
Schools are getting better at navigating ransomware attacks, Sophos finds
In 2025, 67% of global lower education providers said they stopped an attack before their stolen data was encrypted, the cybersecurity company reported. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/schools-ransomware-attacks-sophos/760231/
-
Luxury fashion brands Gucci, Balenciaga and Alexander McQueen hacked customer data stolen
Luxury fashion group Kering – owner of the prestigious Gucci, Balenciaga, and Alexander McQueen brands, amongst others – has confirmed that hackers stole customer data from its systems in June 2025. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/luxury-fashion-brands-gucci-balenciaga-and-alexander-mcqueen-hacked-customer-data-stolen
-
From prevention to rapid response: The new era of CISO strategy
Tags: access, attack, authentication, automation, awareness, breach, ciso, control, credentials, cybersecurity, data, finance, fintech, infrastructure, Intruder, malicious, monitoring, network, privacy, radius, resilience, service, strategy, threat, zero-trustBreaches will happen, so how do we deal with the fallout?CISOs are now spending less energy trying to keep every threat at bay. They know attackers will get in, but the question is, what’s next? The new mindset is about stopping intruders from moving around and escalating the damage.This shift means investing in sharper visibility,…
-
Webinar: Your browser is the breach, securing the modern web edge
The web browser has quietly become one of the most critical components of enterprise infrastructure”, and one of the most dangerous. Join BleepingComputer, SC Media, and Push Security on September 29 at 12:00 PM ET for a live webinar on how attackers are targeting the browser to hijack sessions, steal data, and bypass security. First…
-
Millions of Customer Records Stolen in Cyberattack on Gucci, Balenciaga, and Alexander McQueen
Luxury retail giant Kering has confirmed a major data breach affecting its top fashion houses, including Gucci, Balenciaga, and Alexander McQueen. The cybercriminal group known as Shiny Hunters claims to have stolen private details tied to as many as 7.4 million unique email addresses. Potentially millions of customers around the world may now be at…
-
AWSDoor: New Persistence Technique Attackers Use to Hide in AWS Cloud Environments
As more companies move their critical systems and data to Amazon Web Services (AWS), attackers are finding new ways to stay hidden inside cloud environments. AWSDoor is a tool designed to simplify and automate persistence techniques in AWS. Persistence lets an attacker maintain access even after initial breach remedies IAM-Based Persistence AWS Identity and Access…